Qorrect is published by Qloud LTD, a company registered in England and Wales (No. 12951828), registered office Spurling Cannon, King Arthurs Court, Maidstone Road, Ashford, Kent, TN27 0JS, United Kingdom. Qloud LTD (“we”, “our” or “us”) is the data controller for the processing described in this policy. Contact: privacy@qloud-ltd.com, or by post at the address above.

This policy describes Qorrect 2.1.1 and later, and our server as it has run since September 2026. If you are still using an earlier version, also read If you are still on an earlier version.

Summary

  • Phone-number formatting, duplicate checks, merging duplicates, backups and your change History run and stay on your device.
  • Two features use our server: Greek name suggestions and, only if you send it, feedback on a suggestion.
  • For Greek name suggestions, the contact’s first name and surname, its iOS reference ID and your country and language setting are sent to our API. Our API uses its cache and OpenAI; OpenAI receives the names and the country and language setting, but not the reference ID. Phone numbers, email addresses and other contact details are not sent.
  • Cached name spellings are kept indefinitely. Feedback reports carry no contact or device identifier and are deleted once reviewed. Service logs are kept for 7 days.
  • Qorrect contains no advertising SDK and no analytics or crash-reporting SDK, does not access your advertising identifier and does not track you across apps.

Contact Access and What Stays on Your Device

Qorrect needs access to your contacts to suggest corrections. You can grant full access or, on iOS 18 and later, limited access to contacts you select. Reading and changing contacts on your phone happens under your control, through the iOS permission. Qorrect uses this access to:

  • Read the contact fields it can access — names, company, phone numbers, email addresses and other details such as addresses, dates and photos — to find suggested corrections and possible duplicates, and to make backups. Notes are not read.
  • Write the first-name, surname and phone-number corrections you select and confirm.
  • When you choose to merge duplicates and confirm: copy the chosen name, company, phone numbers and email addresses into one card and delete the other selected cards.
  • When you restore a backup: update existing contacts and recreate the deleted contacts you select.
  • Open a contact’s card when you tap View contact.

The following is stored only on your device, inside Qorrect’s app storage:

  • History — for each applied correction: the contact’s reference ID and display name, the values before and after, the time and the information needed to undo it. For a merge, History also keeps a copy of every selected card’s fields, including photos, so the merge can be undone. You can clear History at any time.
  • Backups — before restoring an older backup, Qorrect first saves a snapshot of your current contacts’ fields and photos. Snapshots do not include notes, contact lists or linked-card membership. You can delete backups in Settings.
  • Name suggestion cache — name spellings already converted, so they are not requested again (kept for up to 30 days).
  • Settings — your country, excluded contacts and any custom name-conversion rules.

Phone formatting uses a phone-number library built into the app and does not contact any server. Duplicate checks compare phone numbers, email addresses and names on your device. Qorrect never merges or deletes contacts automatically — only when you select the cards and confirm. Undoing a merge recreates the deleted cards’ public contact fields as new cards, but cannot restore their notes, account or list membership, linked-card identity or original identifiers.

Greek Name Suggestions

When Greeklish is turned on and your country is Greece or Cyprus, Qorrect looks for contacts whose first name or surname is written in Latin letters. For names not already in the on-device cache, it sends a request to qorrect-api.qloud.ltd over HTTPS containing:

  • The contact’s first name and surname, as a single text value. This is required to produce a suggestion.
  • The contact’s reference ID — the identifier iOS assigns to the contact on your device — so each result can be matched back to the right contact. It is used only to return the result and is not stored on our server or passed to OpenAI.
  • The country setting (such as GR or CY) and the language of the suggestion (Greek).

The request also carries a fixed app key and app name that are identical for every copy of Qorrect; they do not identify you or your device. Phone numbers, email addresses, postal addresses, notes and photos are not sent. If you have typed other text into a contact’s name fields, such as a company name, that text is sent as part of the name. If you turn Greeklish off, no names are sent.

Request

POST https://qorrect-api.qloud.ltd/transliterate/full-names
Authorization: Bearer <app key, the same in every copy of Qorrect>
User-Agent: Qorrect/2.0 (iOS)
Content-Type: application/json

{
  "names": [
    { "fullName": "giannis papadopoulos", "contactId": "<iOS contact reference ID>" }
  ],
  "context": "GR",
  "language": "el"
}

How our server produces a suggestion

  • Cache. Our server first checks its cache of name spellings. A name is answered from the cache only when both its first name and surname are already there; otherwise the name is sent on for conversion.
  • OpenAI. Names not in the cache are sent to OpenAI’s API with a request number and the country and language setting. The contact’s reference ID stays on our server.
  • If OpenAI does not return a usable result, the name is returned without a suggestion. No other service is used.

Suggestions are generated automatically, including by OpenAI’s model, but nothing is changed in your contacts until you review and confirm it. We make no automated decisions with legal or similarly significant effects.

What We Store on Our Server

  • Name cache. Each name returned by OpenAI is stored as a first-name entry and a surname entry, as split by the model, with the Latin spelling, its Greek form (or a note to keep it unchanged), a confidence score, verification status and timestamps. Entries carry no contact reference ID, device identifier or IP address, and are not linked to a contact or a device. We do not describe them as anonymous: they are name spellings, kept so the same spelling can be answered again without contacting OpenAI.
  • Request metrics. For each name-conversion request we record the time, the endpoint, and how many names were requested, answered from the cache or generated by OpenAI. These records contain no personal data.
  • Service logs. Our application’s diagnostic logs record errors without names or reference IDs. Like any web server, ours also keeps an access log of each request: your IP address, the time, the endpoint, the response size and the app name — no names. Service logs are kept for 7 days.
  • Usage counters. To spot unusually heavy use, our server counts requests per IP address. Each entry is deleted after 25 hours. IP addresses are not stored in our database.

Feedback on a Suggestion

If you tap Report incorrect recommendation and submit a correction, Qorrect sends and we store: whether it concerns a first name or surname, the original Latin name, the suggested Greek name, your correction as you typed it or your choice to keep the original, the app version and a random ID for the report. No contact reference ID or device identifier is stored with feedback — our server discards them even if an older version of the app sends them. Feedback is optional and only sent when you submit it. Your correction is also saved on your device as a name rule.

Why We Process This Data

We rely on our legitimate interests (UK GDPR and GDPR Article 6(1)(f)) to convert the names you ask us to convert, to cache spellings so they need not be sent to OpenAI again, to run and secure the service, and to review the feedback you send us. We have weighed these interests against the interests of the people in your address book: what leaves your phone is a name and the contact’s device-local reference number, which does not leave our server; it is sent only when you turn the feature on; and nothing else about the contact is sent. Request metrics contain no personal data. The optional Premium purchase is handled by Apple.

Your right to object: you, and anyone whose name has been processed, can object at any time to processing based on our legitimate interests. See Your Rights.

How Long We Keep It

  • Name cache: indefinitely, because a spelling and its Greek form stay useful; entries carry no identifier.
  • Feedback: until we have reviewed the report and either used it to improve suggestions or rejected it; then it is deleted. A spelling rule created from it stays in the name cache.
  • Service logs: 7 days.
  • Usage counters: 25 hours.
  • Request metrics: kept as counts; they contain no personal data.
  • Data on your phone: until you clear it or delete the app.

Who Else Receives Data

  • OpenAI OpCo, LLC (United States) receives names and the country and language setting to generate suggestions, as our processor under OpenAI’s Data Processing Addendum. It does not receive contact reference IDs. OpenAI does not use this data to train its models, and may keep it for up to 30 days for abuse monitoring. The transfer to the United States is covered by the standard contractual clauses in that addendum, with the UK International Data Transfer Addendum for UK data.
  • Cloudflare, Inc. (United States) terminates the encrypted connection from your phone and forwards the request to our server over a separate encrypted connection, verifying our server’s certificate. It sees the request in transit and your IP address, as our processor. Cloudflare is certified under the EU-US Data Privacy Framework and its UK Extension.
  • Hetzner Online GmbH (Germany) hosts our API server, database, usage counters and service logs, as our processor.
  • Apple processes your Premium purchase and the App Store pages Qorrect opens, under Apple’s own privacy policy.

Each processor is bound by data-processing terms with us.

People in Your Address Book

The names Qorrect processes belong to the people in your contacts, not to you. We cannot notify them individually, because we never receive any way to reach them. This policy is published so that anyone whose name may have been processed can see what happens to it: a first name and surname, sent from an acquaintance’s phone with a device-local reference number that stays on our server, converted to Greek spelling by OpenAI, with the spelling kept in our cache as first-name and surname entries. Anyone can exercise the rights below in respect of their own name.

In-App Promotion

In Qorrect 2.2.0, the free version may download a Phonetiq promotion from Qloud LTD after Premium status is checked. The request includes the app, footer placement, public group and interface language, but no contacts, advertising identifier, user or device identifier, or entitlement receipt. Premium users do not request or see it. The promotion service records no impressions or clicks; Cloudflare and hosting access logs may contain IP address, User-Agent and request URL, and we do not currently state a retention period for those provider logs. The promotion uses native text and images and stays in the footer across tabs. Tapping it opens the English or Greek Phonetiq website with four static campaign attribution parameters and no user identifier. Website analytics may record the resulting page view and campaign attribution under the website privacy policy. Earlier versions use a bundled promotion that opens the App Store without downloading banner content.

Purchases

The optional Premium purchase is processed by Apple through the App Store. We do not receive your payment details. Qorrect stores whether Premium is active on your device, and Restore Purchases asks Apple to confirm it.

Notifications and Background Checks

You can turn on a periodic background check for new contacts. It runs on your device, counts your contacts (it reads only their identifiers, not names or numbers) and changes nothing. iOS decides when it runs. If new contacts have been added, it shows a local notification. It does not use the internet. Notification permission is optional and can be changed at any time in iOS Settings.

Analytics and Tracking

Qorrect includes no analytics, crash-reporting or advertising SDK, does not access your advertising identifier and does not track you across apps or websites. The only third-party code in the app is a phone-number formatting library that works offline. Our server keeps the request metrics, usage counters and service logs described above.

If You Are Still on an Earlier Version

Versions before 2.1.0 show ads served through Google AdMob in the free version. AdMob receives your IP address, device and operating-system type and, only if you allowed it in the iOS tracking prompt, your Advertising Identifier (IDFA); you can change that choice in Settings → Privacy & Security → Tracking. Those versions also declare Apple’s SKAdNetwork identifiers for ad measurement. Google processes this data as an independent controller under Google’s Privacy Policy and its description of how Google uses information from sites or apps that use its services. Qorrect itself never receives your Advertising Identifier. Buying Premium stops the ads, and updating removes AdMob from the app entirely.

Versions up to 2.1.0 also send a device identifier (Apple’s identifier for vendor) and the contact reference ID with feedback; our server now discards both. Those versions cannot merge duplicates. Everything our server does with requests, described above, applies to every version.

Your Choices and Rights

Your choices. Turn off Greeklish to stop names being sent to our server; exclude a contact to keep it out of processing; clear History on the History screen; delete backups and snapshots in Settings. Deleting Qorrect removes everything it stored on your phone, although an iOS or iCloud backup made earlier may keep a copy until it is replaced. Deleting the app does not undo changes already written to your contacts and does not delete feedback you sent us.

Your rights. Under UK and EU data-protection law you can ask us for access to, correction or deletion of personal data we hold, ask us to restrict its use, and object to processing based on our legitimate interests. These rights also belong to the people in your address book whose names have been processed. Because cache entries are single first names or surnames held with nothing else, we cannot tell whose they are; if you give us the spelling, we can tell you whether it is cached and delete it. Feedback can be located from the details you give us about the report. Write to privacy@qloud-ltd.com. You can complain to the Information Commissioner’s Office or, if you are in the EU, to your national data-protection authority — in Greece, the Hellenic Data Protection Authority. For advertising data Google holds from earlier versions, use Google’s advertising controls.

Children

Qorrect is not directed at children, and we do not knowingly process children’s personal data.

Changes to This Policy

We may update this policy. The date at the top shows the current version. If a change materially affects how we use your data, we will also say so in the app’s release notes.

Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@qloud-ltd.com.